netfilter: xt_socket: add XT_SOCKET_RESTORESKMARK flag